Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: BMC Control-M/Enterprise Manager 9.0.21 Clear all filters
TI-2026-09064 CVE-2026-10538 · GHSA-w883-5vxm-2pq9

Improper deserialization handling in Control-M Components

Priority MEDIUM 41

Messaging consumer functionality allows deserialization of user-controlled data without sufficient restriction of allowed object types in the out of support Control-M/Server and Control-M/Enterprise Manager versions 9.0.…

CVSS 4.0HIGH 8.9 Network High privileges No interaction EPSS 0.00417 Published 2026-07-01 Fixed in 9.0.21 CWE-502
TI-2026-09066 CVE-2026-10540 · GHSA-7fxm-rp47-f3xm

Weak password hash protection in Control-M/Entreprise Manager

Priority LOW 24

The Control-M/Enterprise Manager uses weak protections for stored hashes of account passwords, potentially allowing offline password recovery attacks if credential data is obtained by an attacker.

CVSS 4.0MEDIUM 5.6 Local High privileges No interaction EPSS 0.00106 Published 2026-07-01 Fixed in 9.0.21 CWE-328